-200 



Client 
GW- 
Router, 



Receive packet 
from client 



02 




Add tag to start 
packet 



s 



210 



212 



Add destination 
identification 
entry for start 
packet to 
Translation 
Table 



Forward start 
packet to server 



end ^y*- 



Fig. 2 



300 



/Server GVv\ 
[ router/ Web\ 
I Server/ J 
y Switch y 



Receive packet 
from client GW- 
router 



02 




Forward sts 
a selectee 
applic 


irt packet to 
1 server (if 
;able) 


_ a 


* 



314 



Q end ^ 



Fig 



400 



Replica 
Configuration 



Receive start 
packet from 
Server, Server 
GW-router, or 
Switch 




Crack start packet. 



Replica drops 
and does not 
handle start 
packet 



408 



Send immediate 
acknowledgement to 
client. 



12 



Replica drops 
and does not 
handle start 
packet 



Replica 
Configuration 



Receive start 
packet from 
Server, Server 
GW-router, or 
Switch 



02 




Spoof server 
(e.g.,use Server 
address as source 
address) to send 
immediate 
acknowledgement to 
client 



end 



Fig. 4B 



-450 



U1 



Y 



nj 
m 



Replica 
Configuration 



Receive start 
packet from 
Server, Server 
GW-router, or 
Switch 



02 




£ 



408 



Replica drops 
and does not 
handle start 
packet 





N 

r 


Crack start packet. 






Encapsulate 
acknowledgement w/ replica 
source address and client 
destination address. 







62 



end ~^y* 



Fig. 4C 



-500 



rciient GW-Router>\ 
Configuration A 



1 


f 


Receive 
acknowledgement 
from a replica or 
server 




f 



02 



N 



■war 

Li i 

o 
Ul 



Send reset to 
source of 
acknowledgement 




14 



Ts this the first 
^acknowledgement forj 
lis connectior 



Y 



01 
Hi 

m 
O 



516 



Obtain 
Translation 
Table entry for 
this connection 



506 



508 



Delete entry for 
this connection 
from Translation 
Table 






N 510 


Update entry for this 
connection in Translation 
Table w/ Replica's address 






r 




Replace replica's source 
address w/ Server's source 

address and forward 
acknowledgement to client 


51 




r 





Fig. 5A 



/Client GW-RouteX 
\ Configuration A J 



1 




Receive 
acknowledgement 
from a replica or 
server 







32 



N 



Send reset to 
source of 
acknowledgement 




14 



Ts this the first 
^acknowledgement forj 
lis connectior 



Crack acknowledgement 
packet 



516 



335 



Obtain Translation Table 
entry for this connection 




06 



Delete entry for 
this connection 
from Translation 
Table 




508 



> 


N 

f 


Update entry for this 
connection in Translation 
Table w/ Replica's address 




r 


Encapsulate packet again 
and forward encapsulated 
packet to client 


2 





510 



542 



S N 



mmm m 



/Client GW-Router\ 
I Configuration C J 



-550 



Receive acknowledgement 
from a replica or server 



^552 



Crack received packet 
to determine source if 
tunnelling used 



>54 



N 



fs this the first 
^acknowledgement forj 
lis connectior 



Send reset to 
source of 
acknowledgement 




14 



516 





Y 

r 


Obtain Translation Table 
entry for this connection 








06 



Delete entry for 
this connection 
from Translation 
Table 




508 



N 



Update entry for this connection 
in Translation Table w/ Replica's 
address 



s 



510 



Forward cracked 
acknowledgement to 
client 



s 



564 



▼ 



616 



Forward packet 
to destination 
(e.g., client) 



Client GW- 
Router 
sConfigu ration 



-600 



1 




Receive packet 







^\j602 




Search for entry 
in Translation 
Table for this 
connection 



-506 




608 



Y 



610 




Replace Server destination 
w/ replica destination address 
address (from Table) and 
forward modified packet to 
Replica 



Replace replica source 
address w/ Server source 
address (from Table) and 
forward modified packet to 
Client 



Fig. 6A 



616 



Forward packet 
to destination 
(e.g., client) 



Client GW- 
Router 
sConfigu ration B/ 



-630 







Receive packet 




r 



^\j632 




Y 




Search for entry 
in Translation 
Table for this 
connection 








06 




608 



Replace Server Desination 

Address with Replica 
Destination Address and 
forward modified packet to 
Replica 



636 



end 



Fig. 6B 



Client GW- 
Router 
sConfiguration C/ 



-650 







Receive packet 







""^652 




616 



Search for entry 
in Translation 
Table for this 
connection 



Forward packet 
to destination 
(e.g., client) 



-.606 




Y 



610 




Encapsulate packet with 
Replica Desination and Client 

Source addresses and 
forward encapsulated packet 
to Replica 



658 



Crack packet and forward 
cracked packet to Client 



end ^ 



Fig. 6C 



a 
m 
m 
□ 
yi 

03 

H 

X 

Q 

m 
m 
m 
o 
o 




A 






CO 












o 




CO 


o 


CO 


S 


CE 


w 


o 








(=Lh 



PL, 



V 



